Unscored severity · published Mar 24, 2014
CVE-2014-0016
stunnel before 5.00, when using fork threading, does not properly update the state of the OpenSSL pseudo-random number generator (PRNG), which causes subsequent children with the…
–
CVSS
2.2%
EPSS
No
On KEV
Description
stunnel before 5.00, when using fork threading, does not properly update the state of the OpenSSL pseudo-random number generator (PRNG), which causes subsequent children with the same process ID to use the same entropy pool and allows remote attackers to obtain private keys for EC (ECDSA) or DSA certificates.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.2% · higher than 82% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
ST
Stunnel · Stunnel
through 4.56; 0.1; 1.0; 1.1; 1.2; 1.3; +34 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2014-0016
CVE.org
https://www.cve.org/CVERecord?id=CVE-2014-0016
Mailing List
http://www.openwall.com/lists/oss-security/2014/03/05/1
Third Party Advisory
http://www.securityfocus.com/bid/65964
Patch
https://bugzilla.redhat.com/attachment.cgi?id=870826&action=diff
Issue Tracking
https://bugzilla.redhat.com/show_bug.cgi?id=1072180
Release Notes
https://www.stunnel.org/sdf_ChangeLog.html
More from Stunnel
7.5
CVE-2021-20230
A flaw was found in stunnel before 5.57, where it improperly validates client certificates when it is configured to use both redirect and verifyChain options
–
CVE-2015-3644
Stunnel 5.00 through 5.13, when using the redirect option, does not redirect client connections to the expected server after the initial connection, which allows remote attackers…
–
CVE-2013-1762
stunnel 4.21 through 4.54, when CONNECT protocol negotiation and NTLM authentication are enabled, does not correctly perform integer conversion, which allows remote proxy servers…
–
CVE-2011-2940
stunnel 4.40 and 4.41 might allow remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors
–
CVE-2008-2420
The OCSP functionality in stunnel before 4.24 does not properly search certificate revocation lists (CRL), which allows remote attackers to bypass intended access restrictions by…